Details

VuXML ID

d022754d-8839-11d9-aa18-0001020eed82

Discovery

2005-02-06

Entry

2005-02-26

A Mozilla Foundation Security Advisory reports:

A predictable name is used for the plugin temporary
directory. A malicious local user could symlink this to
the victim's home directory and wait for the victim to run
Firefox. When Firefox shuts down the victim's directory
would be erased.